CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Smackcoders Export All Posts, Products, Orders, Refunds & Users.This issue affects Export All Posts, Products, Orders, Refunds & Users: from n/a through 2.4.1.
Explanation of Vulnerability in Simple Terms
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress contains an information exposure vulnerability that allows unauthenticated attackers to read sensitive data through the plugin's functionality. The vulnerability requires specific conditions to exploit but does not require user interaction. Affected versions are 2.4.1 and earlier. Update to a version newer than 2.4.1 when available.
What an attacker can do
Read sensitive data exported by the plugin without authentication.
Potential impact on your site
Sensitive user, product, and order data may be exposed to unauthenticated attackers.
Conditions required to exploit
Network access to the WordPress site; specific conditions must be met to trigger the vulnerability.
Key dates
External resources
Related vulnerabilities
